Legal
Privacy Policy
The short version. Rayclast is a walking game, so it needs to know where you are. It reads your location only while the app is open, and your GPS coordinates never leave your phone — the app turns them into the name of a zone on the device and sends only that name. There is no analytics SDK, no advertising, no tracking, and nothing is sold or shared for marketing. You can play without giving us an email address.
Who this covers
Rayclast is made by Cuneiverse Labs LLC. This policy covers the Rayclast mobile app (bundle identifier com.cuneiverselabs.rayclast) on iOS and Android, including the development and test builds the app is currently distributed as, and this website at rayclast.com.
Location
Location is the heart of the game, so it is worth being precise about what happens to it.
When it is read
Only while the app is open and in use. Rayclast requests the “While Using the App” location permission and nothing more. It registers no background location task, so it does not read your position when the app is closed or in the background.
What stays on your device
Your actual coordinates. The app compares your GPS position against the zone boundaries that ship inside it — harbours, regions and venues — entirely on the device, and keeps the raw position in local storage on the phone.
What is sent to our server
Only a coarse reference to the zone you resolved into: identifiers like a harbour, region or venue id, which of the three modes you are in, and the distance you have walked in kilometres. Never a latitude or longitude.
This is an enforced property of the system rather than a promise about our intentions: the only location shape the server will accept is that coarse zone reference, and payloads carrying coordinates are rejected at the API boundary. In practice it means our records can show that you reached Pioneer Square. They cannot show the route you walked to get there, how long you lingered, where you live, or where you were standing.
The map
When you open the in-game map, the map tiles are fetched from OpenFreeMap, a third-party tile service. Like any request your phone makes to any server, that one carries your IP address and tells them which part of the map is being drawn. We send them no account information and no game state. If you never open the map, your device never contacts them.
Your account
Rayclast creates an anonymous account for you on first launch. No email address, name, or sign-up is required to play; the app simply holds a random account identifier.
You may optionally attach an email address to claim that account, which is what lets your progress survive a lost or replaced phone. If you do, the address is used only to send you sign-in codes and links. We do not send marketing email, and we do not share the address.
Alongside your account we store a sign-in session record that includes your IP address and device user-agent string. This is the ordinary mechanism that keeps you signed in between launches and lets us recognise abuse of the API.
Your game data
Your progress is stored as an append-only log of what you did: which storylets and branches you chose, the outcome of challenge rolls, the qualities those outcomes changed, journal entries, achievements unlocked, the zone identifiers above, and distance walked. It is kept so that your progress is durable and so the journal is a true record of a voyage rather than a summary the app might lose.
What Rayclast does not do
This list is a description of the app as built, not a statement of policy we could quietly drop:
- No analytics or telemetry. The app contains no analytics, attribution or crash-reporting SDK of any kind.
- No advertising, no ad networks, and no advertising identifier. Rayclast does not ask for App Tracking Transparency permission because there is nothing tracking you to permit.
- No tracking of you across other apps, sites, or companies.
- No selling, renting, or trading your data, and no sharing it with data brokers.
- No access to your contacts, photos, camera, microphone, calendar, or health data. The app never asks, because it never needs them.
- No push notifications; the app has no notification capability.
- This website sets no cookies, runs no analytics, and loads no third-party scripts or fonts — a content-security policy pins it to its own origin.
Who processes data for us
We keep this list as short as we can. At present it is:
- Railway — hosts the Rayclast server, its database, and this website.
- OpenFreeMap — serves the map tiles your device requests, as described above.
- An email delivery provider — delivers sign-in messages, and only if you have chosen to attach an email address.
Children
Rayclast is not directed to children under 13, and we do not knowingly collect personal information from them. Because the game asks you to walk around a real city, it is written for players old enough to judge their own surroundings.
Your choices
- You can revoke location permission at any time in your device settings. The location-driven parts of the game stop working; the rest, including the At Home mode, keeps working.
- You can play without ever attaching an email address, in which case we hold no way to identify you personally.
- You can write to us with questions about your data, or to ask us to remove it, at the address below.
Changes to this policy
If this policy changes, the “last updated” date at the top of the page changes with it. If a change materially affects what we collect or what we do with it, we will say so here rather than letting the date carry the news on its own.
Contact
Questions about this policy, or about your data, go to Cuneiverse Labs LLC at: